CVE-2026-13032

CVE-2026-13032: A use-after-free vulnerability in WebGL on Google Chrome for Android (prior to 149.0.7827.197) could allow a remote attacker to perform a sandbox escape via a crafted HTML page. Impact is labeled Critical . Affected component: WebGL/Chromium stack; root cause is use-after-free. Th...

CVE-2026-13032

Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-39032

Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in containerd-app

The html.Parse function in golang.org/x/net/html has quadratic parsing complexity when processing certain inputs, which can lead to a Denial-of-Service DoS attack if an attacker provides specially crafted HTML content...

PT-2026-52039

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.197 Description An inappropriate implementation in DeviceBoundSessionCredentials allows a remote attacker to bypass the same origin policy, which is a security mechanism that restricts how a document ...

PT-2026-52050

Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

PT-2026-52046

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.197 Description A use after free issue exists in WebGL, which could allow a remote attacker to potentially perform a sandbox escape by inducing the user to visit a crafted HTML page. A use...

PT-2026-52043

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.197 Description A race condition in DevTools allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape. This is achieved by using a crafted HTML...

PT-2026-52056

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.197 Description A use after free issue exists in the Autofill component on Windows. This occurs when a remote attacker induces the browser to process a specially crafted HTML page, which can lead to...

PT-2026-52051

Out of bounds read and write in BlinkInterestGroups in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

PT-2026-52045

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.197 Description A use after free issue exists in the FileSystem component. This flaw allows a remote attacker to potentially exploit heap corruption, which occurs when a program continues to use a...

The vulnerability of the Password component in the Google Chrome browser allows a hacker to gain access to protected information.

The vulnerability of the Password component in the Google Chrome browser is related to a flaw in data protection mechanisms. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to protected information through a specially created HTML page...

The vulnerability of Google Chrome’s browser, related to a data source confirmation error, allows attackers to circumvent existing security restrictions.

The vulnerability of Google Chrome is related to a data source confirmation error. Exploiting this vulnerability allows an attacker to bypass existing security restrictions through a specially created HTML page...

The vulnerability of the New Tab Page component in the Google Chrome browser allows a perpetrator to compromise the confidentiality of protected information.

The vulnerability of the New Tab Page component in the Google Chrome browser is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of protected information through a specially created HTML page...

The vulnerability of the Tracing component in Google Chrome browser allows a hacker to trigger a service failure.

The vulnerability of the Tracing component in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...

CVE-2026-12469

A flaw was found in the GPU component of Google Chrome on Android. This uninitialized use vulnerability could be exploited by a remote attacker. By enticing a user to visit a specially crafted HTML page, an attacker could cause the leakage of sensitive cross-origin data...

SUSE CVE-2026-12437

Use after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

SUSE CVE-2026-12438

Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

SUSE CVE-2026-12439

Use after free in Digital Credentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

SUSE CVE-2026-12440

Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...